fixed project list permission